hacker-scripts

English | 简体中文 Hacker Scripts Based on a true story : xxx: OK, so, our build engineer has left for another company. The dude was literally living inside the terminal. You know, that type of a guy who loves Vim, creates diagrams in Dot and writes wiki-posts in Markdown... If something - anything -...

DLPwn

DLPwn Data Leak Prevention via Bluetooth Speaker DLPwn is a Red Team tool designed for file exfiltration to bypass security systems such as EDR Endpoint Detection and Response, XDR Extended Detection and Response, DLP Data Loss Prevention, and more broadly any air-gapped information systems. It...

CVE-2026-8461-EXP

CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV Heap OOB Write PoC !WARNING This repository contains a working exploit PoC for a heap corruption vulnerability. It is intended solely for authorized security research, CTF contexts, and defensive analysis. Do not use against systems you do not own or...

BlackBerryC2

BlackBerryC2 2.0.0-beta BlackBerryC2 is an encrypted remote administration and C2 framework designed exclusively for educational use, security research, and controlled laboratory environments. The project demonstrates how to build a custom command-and-control server with application-layer...

sigma-ai

AgentShield Sigma Rules What is This Repository? This repository contains detection rules that help identify when an AI agent is being attacked or manipulated. Think of it as a library of "threat signatures" -- each rule describes a pattern that, when matched against an agent's log data, signals...

haxunit

Intro • Installation • Usage • Running HaxUnit • Functions HaxUnit.com Join the Discord! 📘Intro HaxUnit is a Python-based comprehensive reconnaissance and security assessment tool for web domains. It integrates various tools for subdomain enumeration, port scanning, vulnerability scanning, and...

F5-CVE-2022-1388-Exploit

F5-CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage Check against single host python3 CVE-2022-1388.py -v true -u targeturl Attack host and test command python CVE20221388.py -a true -u targeturl -c command Attack list of hosts python CVE20221388.py -s true -f file...

forbiddenpass

UPDATE Thanks to Knowledge-Wisdom-Understanding MrPMillz for making the script cleaner and fixing the header payloads. INSTALLATION git clone https://github.com/gotr00t0day/forbiddenpass.git cd forbiddenpass pip3 install -r requirements.txt python3 forbiddenpass.py -h USAGE . . . . \ /\ | || | /|...

HTTPLoot

HTTPLoot An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites. Usage To use the tool, you can grab any one of the pre-built binaries from the Releases section of the repository. If you want to build the...

username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

Review.CVE-2021-3156

👑 CVE-2021-3156 Baron Samedit — Privilege Escalation via Heap Overflow in sudo 📅 Date: 2025-06-08 ✍️ Author: @TopskiyPavelQwertyGang 🧠 Security Researcher | Red Team Enthusiast 🧠 CVE Overview CVE-ID: CVE-2021-3156 Type: Heap-based Buffer Overflow Component: sudoedit sudo Access Level: Local Goal:...

Amnesiac

Amnesiac Amnesiac is a post-exploitation framework designed to assist with lateral movement within active directory environments. Amnesiac is being developed to bridge a gap on Windows OS, where post-exploitation frameworks are not readily available unless explicitly installed. In fact, it is...

antivmdetection

Antivmdetection Background A script to help you create templates, which you can use with VirtualBox to make VM detection harder. My first post on the subject was in 2012 and have after that been updated at random times. The blog format might have not been the best way of publishing the informatio...

Ropper

Ropper You can use ropper to display information about binary files in different file formats and you can search for gadgets to build rop chains for different architectures x86/X8664, ARM/ARM64, MIPS/MIPS64, PowerPC/PowerPC64, SPARC64. For disassembly ropper uses the awesome Capstone Framework...

simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

GitHunt

BHEU Demos This repository contains three demos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity 1. potentialattacksdemo : A Flask web application that shows a demo of identifying and investigating an attack based off the public GH firehose. 2. ghdig : A...

IntRec-Pack

IntRec-Pack Intelligence and Reconnaissance Package/Bundle installer. IntRec-Pack is a Bash script designed to download, install and deploy several quality OSINT, Recon and Threat Intelligence tools. Due to the fact it manages the installation of the various dependencies related to these programs...

Tiredful-API

What is Tiredful API? Tiredful API is intentionally designed broken app. The aim of this web app is to teach developers, QA or security professionals about flaws present in webservices REST API due to insecure coding practice. Who can use Tiredful API? Web developers Web Pentesters Security...

whoami-project

Whoami - Enhanced Privacy and Anonymity for Debian and Arch-based Linux Distributions Feature Request | Report a Bug About the Project Whoami is a user-friendly privacy and anonymity tool designed for Debian and Arch-based Linux distributions. With its simple interface and ease of use, it...

reconness

ReconNess Web App Why ReconNess? Well, we have seen a lot of bugbounty hackers organizing his recon using txt and doing a lot of bash scripts to filter the output to keep everything organized with the intention to focus only on the potentially vulnerable targets. But realistically this demands a...